The vulnerability is a stored Cross‑Site Scripting flaw in the Fiverr.com Official Search Box plugin, enabling an attacker to inject malicious scripts into pages served to users. If exploited, the script can read or modify page content, hijack user sessions, and potentially exfiltrate sensitive data or spread malware. The flaw is rooted in improper input sanitization as indicated by its CWE‑79 classification.

WordPress sites utilizing the Fiverr.com Official Search Box plugin with version numbers up to and including 1.0.8 are affected. The plugin is distributed, via the fiverraffiliates vendor, and any WordPress installation that has not upgraded beyond version 1.0.8 remains vulnerable.

The CVSS score of 6.5 categorizes the issue as medium severity. The EPSS score of less than 1% suggests a low likelihood of widespread exploitation at present. It is not listed in the CISA KEV catalog, further implying limited current exploitation activity. The most probable attack vector is through user interaction with the search box; an attacker can submit a crafted search query that is stored and subsequently rendered on the site, delivering the malicious payload to end users.